Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sor4GSJhyHOKLP_I_NSROIY-t7g.roa
File: sor4GSJhyHOKLP_I_NSROIY-t7g.roa (raw, json)
Hash identifier: INraAbmRRHEnQ2ZxWoT49Fwf8gY683ACGa0WztuK3+E=
Subject key identifier: B2:8A:F8:19:22:61:C8:73:8A:2C:FF:C8:FC:D4:91:38:86:3E:B7:B8
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B03208A0856FACEBB75E78A066ED
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sor4GSJhyHOKLP_I_NSROIY-t7g.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61096
IP address blocks: 89.33.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b0:32:08:a0:85:6f:ac:eb:b7:5e:78:a0:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28af8192261c8738a2cffc8fcd49138863eb7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1b:fe:dd:20:04:fc:d0:ef:ef:84:d8:91:e9:
36:50:cc:46:df:fd:d3:a2:7e:f5:3b:39:16:4f:57:
6e:72:b3:67:5c:e2:5d:52:0c:a5:7c:bc:82:48:34:
6e:18:0f:e1:7d:85:74:f9:7a:09:22:92:c8:e8:54:
15:a3:f1:fc:53:b2:e5:06:76:9c:1b:15:d6:c9:8b:
2a:16:97:5d:80:31:11:3e:6f:d6:c2:c5:af:82:29:
45:72:b8:3b:f8:e1:48:df:94:53:60:be:94:ca:3b:
62:0a:8e:31:02:c3:fa:a1:61:97:78:ad:cb:89:45:
3a:ac:c1:b1:e6:f5:fc:01:fb:4c:e6:32:78:69:9d:
79:fd:42:ef:33:bc:6b:c4:74:15:b5:86:18:ba:ee:
b2:25:cb:44:fe:b9:25:a0:5e:5d:9a:2f:f5:73:e8:
58:7e:ef:90:83:43:3b:fc:d6:ab:e3:72:a0:8d:4a:
b8:93:2d:0d:1f:59:df:22:e6:d5:cd:54:61:26:5d:
52:13:0e:cb:80:8a:ec:cc:df:79:d7:57:11:6e:2c:
e5:3d:8b:18:e1:cf:2a:84:b7:60:7c:e4:a6:f6:95:
57:b7:f6:6f:18:a4:e0:ab:db:9f:37:d0:04:59:1e:
b2:d6:fd:e0:b5:ce:68:32:e7:23:f9:03:c4:2f:c9:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:F8:19:22:61:C8:73:8A:2C:FF:C8:FC:D4:91:38:86:3E:B7:B8
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sor4GSJhyHOKLP_I_NSROIY-t7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:1a:ab:21:bb:a7:78:3a:e3:ce:5b:3a:41:f0:e4:d3:3b:86:
f0:1c:3b:b8:1e:d7:1a:d7:fb:bf:f6:fa:de:be:84:2a:6c:43:
fa:07:6f:b0:45:c6:61:f8:59:80:a3:f8:58:08:74:88:1a:2c:
8a:c5:20:a7:12:d1:7f:9e:22:ce:18:9c:25:f6:a7:e0:20:6a:
80:f9:3d:cc:14:d6:30:fe:78:93:35:fa:42:8b:30:f1:85:cd:
24:0c:78:34:21:4d:83:d3:63:83:95:b6:2a:d1:59:d7:71:78:
5d:15:66:6f:97:e6:df:bc:f1:d8:a9:a8:43:46:b3:20:2c:c3:
67:7e:af:fd:09:c4:ef:99:a0:6d:ad:26:ab:6d:97:5a:57:ff:
12:ab:c7:c7:4a:95:b4:cc:27:97:42:d9:48:95:97:d3:bf:0d:
ef:de:58:fb:fb:1f:03:ac:d2:9d:1c:0b:0d:8a:86:51:a7:d7:
63:b4:eb:74:f3:9b:57:d6:dd:f3:b6:24:65:ee:8f:21:ec:65:
e7:76:fc:f9:98:c0:0c:fc:18:45:ad:44:65:bb:d6:dc:a9:81:
d7:83:a2:61:3e:e6:cb:62:b7:c5:e0:05:c9:0f:a4:d2:66:1d:
e4:9f:ed:17:84:eb:d7:8b:be:2a:85:ce:00:0b:a8:38:2e:77:
d6:2d:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:06 2025 by rpki-client